Windows Protection Suite

Posted in: Malware

Call Toll Free in the US and Canada!

Title: Windows Protection Suite
Type: Rogue Antispyware

Remove Windows Protection Suite. Removal instructions

 
Also known as: WindowsProtection Suite, WindowsProtectionSuite, Windows ProtectionSuite
Severity scale:Windows Protection Suite severity is 68  (68 / 100)

 

Windows Protection Suite is a misleading anti-virus application that uses false scan results and fake security alerts to make you think your computer is infected with spyware, Trojans and other malware. The rogue program provides exaggerated scan results and then suggests buying a full version of this fake program to remove non-existing system security threats. Windows Protection Suite is from the same family as Windows Security Suite, Malware Destructor 2009, Virus Shield 2009, Extra Antivirus, Virus Sweeper, Virus Doctor, Virus Melt.

Windows Protection Suite is promoted through the use of Trojan viruses and fake online anti-malware scanners. The security threat can be also downloaded and installed manually from its homepage windowsprotectionsuite.com. Once installed, this parasite will be configured to scan your computer automatically each time you log on into Windows. WindowsProtection Suite will report a variety of infections and privacy issues ans state that you must purchase the program in order to fix those problems. What is more, it will constantly display legitimately looking security alerts from Windows task bar. The misleading program will also impersonate Windows Security center. It may display security warnings and notifications about unprotected computer and possible attacks from a remote machine. Fake notification from Windows task bar reads:

“System Alert
malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows Protection Suite”

While running, WindowsProtectionSuite will dramatically decrease system performance. Likely it will delete system restore points and block all found security applications. To make things worse, Windows Protection Suite will hijack Internet browsers and search results. If you wind that your computer is infected with this bogus software, please use the manual removal guide below to remove Windows Protection Suite from the system for free.

Related files: DBOLE.sys, CLSV.tmp, cid.tmp, cb.sys, Instructions.ini, cookies.sqlite, winps.cfg, vd952342.bd, working.log, WINPS.ico, ddv.dll, CLSV.dll, cid.dll, sqlite3.dll, mozcrt19.dll, ppal.exe, WindowsProtectionSuite.exe, std.exe, snl2w.exe, Windows Protection Suite.exe, Uninstall.exe, WI345d.exe, CLSV.exe, ANTIGEN.drv, DBOLE.drv, dudl.sys, energy.dll, grid.dll, grid.sys, kernel32.dll, tempdoc.dll, PE.dll, PE.tmp, runddl.dll, sm.dll

Windows Protection Suite properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Windows Protection Suite snapshot:

Windows Protection Suite removal

Automatic Windows Protection Suite removal:

remover for Windows Protection Suite

SpyHunter is recommended remover to uninstall Windows Protection Suite.
You should confirm using free trial that it detects current version of parasite.

Note:
Tested and Confirmed means that we have tested spyware remover with multiple versions of Windows Protection Suite and
got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update.
In such case try other removers in the line.


Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention,
please read manul removal instructions below.

If you failed to remove Windows Protection Suite using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla
download | review

Tested and Confirmed! STOPzilla removes Windows Protection Suite (2009-08-12 00:47:30)

Malwarebytes Anti Malware
download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Windows Protection Suite (2009-08-12 00:47:30)

Spyware Doctor
download | review | tutorial

We are testing Spyware Doctor’s efficiency at removing Windows Protection Suite
(2012-02-04 18:15:57)

XoftSpySE Anti Spyware
download | review


Windows Protection Suite manual removal:

Kill processes:
snl2w.exe std.exe WindowsProtectionSuite.exe WI345d.exe ppal.exe uninstall.exe WI345d.exe CLSV.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ???WindowsProtectionSuite???
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “9877034603”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Protection Suite”

HELP:
how to remove registry entries

Unregister DLLs:
energy.dll grid.dll kernel32.dll tempdoc.dll PE.dll runddl.dll SM.dll mozcrt19.dll sqlite3.dll cid.dll CLSV.dll ddv.dll

HELP:
how to unregister malicious DLLs

Delete files:
WI345d.exe CLSV.exe snl2w.exe std.exe WindowsProtectionSuite.exe WI345d.exe ppal.exe tempdoc.dll energy.dll mozcrt19.dll sqlite3.dll cid.dll CLSV.dll ddv.dll tempdoc.dll WINPS.ico working.log vd952342.bd winps.cfg cookies.sqlite Instructions.ini cb.sys cid.tmp CLSV.tmp DBOLE.sys

HELP:
how to remove harmful files

Delete directories:
%UserProfile%\Application Data\Windows Protection Suite

Information added: 2009-08-12 00:47:30
Information updated: 2012-02-04 15:38:42
Tags: , ,